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Amendments to the Claims: 

Please amend the claims as shown below. This Listing of Claims will replace 
prior versions, and listings, of claims in the application. 

Listing of Claims: 

1 . (Currently Amended) An exponent calculation apparatus for calculating 
x e based on two integers x and e, the apparatus comprising: 

an input unit for inputting the two integers x and e; 

a candidate exponents storing unit for storing candidate exponents {l_i} 
(0<i<L-1 ), the number of the candidate exponents being L; 

a pre-calculation unit for pre-calculating x A {l_i} for each of the candidate 
exponents {l_i}, which are stored in the candidate exponents storing unit, based 
on the input integer x; 

a pre-calculated values storing unit for storing the values x A {l_i} obtained 
by the pre-calculation; 

a dividing unit for dividing the input integer e into a plurality of values {f_i} 
(0<i<F-1) so that each of the values {f_i} corresponds to one of the candidate 
exponents {l_i}; 

a calculation result storing unit for storing a calculation result c; 

a sequential processing unit for sequentially updating the calculation result 
c for each of the divided values {f_i} (0<i<F-1) by using each of the pre-calculated 
values x A {l_i}; and 

an output unit for outputting the updated calculation result c as x e after the 
calculation result c is updated for oach of all the values {f_i} as x e . 
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2. (Currently Amended) An exponent calculation apparatus for calculating 
x e (mod N) based on three integers x, e, and N, the apparatus comprising: 

an input unit for inputting the three integers x, e, and N; 

a candidate exponents storing unit for storing candidate exponents {l_i} 
(0<i<L-1), the number of the candidate exponents being L; 

a pre-calculation unit for pre-calculating x A {l_i} for each of the candidate 
exponents {l_i}, which are stored in the candidate exponents storing unit, based 
on the input integer x; 

a pre-calculated values storing unit for storing the values x A {l_i} obtained 
by the pre-calculation; 

a dividing unit for dividing the input integer e into a plurality of values {f_i} 
(0<i<F-1 ) so that each of the values {f_i} corresponds to one of the candidate 
exponents {l_i}; 

a calculation result storing unit for storing a calculation result c; 

a sequential processing unit for sequentially updating the calculation result 
c for each of the divided values {f_i} (0<i<F-1) by using each of the pre-calculated 
values x A {l_i}; and 

an output unit for outputting the updated calculation result c as x e (mod N) 
after the calculation result c is updated for oach of all the values {f_i} as x e (mod 
N). 

3. (Currently Amended) The apparatus according to Claim 2, wherein the 
sequential processing unit comprises: 

an initializing unit for setting f_0, which is an initial value of the calculation 
result c, in the calculation result storing unit; and 

an updating unit for sequentially updating b i t l ength roprosontod by c:=c 2 
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as many times as a number of a bit length of each of the divided values {f_i} 
(0<i<F-1) in binary notation and updating c:=c*f_i. 

4. (Original) The apparatus according to Claim 2, wherein the candidate 
exponents stored in the candidate exponents storing unit have a form of (0) or 
1[01] L in binary notation, where [xy]| means that xy is repeated i times. 

5. (Original) The apparatus according to Claim 2, wherein the candidate 
exponents stored in the candidate exponents storing unit have a form of (0), (11), 
or 1[01] L in binary notation, where [xy]; means that xy is repeated i times. 

6. (Original) The apparatus according to Claim 2, wherein the dividing unit 
divides (10) in a bit string of the divided values represented in binary notation into 
(01) and (01) so that the values {f_i} may be overlapped, and, in an updating 
process of c:=c 2 by the sequential processing unit, an overlapped portion of bit 
length of the values fj is not updated. 

7. (Original) The apparatus according to Claim 2, further comprising: 
a multiplication number estimating unit for estimating the number of 

multiplications according to division performed by the dividing unit; and 

a division controlling unit for controlling division performed by the dividing 
unit based on the estimated number of multiplications. 

8. (Original) The apparatus according to Claim 7, wherein the 
multiplication number estimating unit estimates the number of multiplications by 
assigning different weights to multiplication of different values and multiplication 
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of same values. 

9. (Original) The apparatus according to Claim 2, wherein the number L of 
the candidate exponents, which are stored in the candidate exponents storing 
unit, is increased or decreased depending on the bit length of the input value e. 

1 0. (Original) The apparatus according to Claim 2, wherein each of the 
candidate exponents stored in the candidate exponents storing unit is 0 or a 
binary number of W bits or less, and has a form 1 [01 ] L , 1 1 [01 ] L , or 1 [01 ] L 1 , where 
[xy]j means that xy is repeated i times. 

1 1 . (Original) The apparatus according to Claim 1 0, 

wherein the pre-calculation unit uses four functions ^ (), f 2 (), f 3 (), and f 4 (), 
which represent the candidate exponents, 

sets initial values: f 1 (0)=1 , f 2 (0)=0, f 3 (0)=1 , and f 4 (0)=1 , 

performs circular calculation so as to satisfy f 1 (i)=f 2 (i-1)+f 4 (i-1), 
f 2 (i)=f 1 (i)+f 3 (i-1 ), f 3 (i)=f 2 (i)+f 3 (i-1 ), and f 4 (i)=f , (i)+f 2 (i) and obtains forms (i)=1 [01 ],, 
f 2 (i)=10[00]|, f 3 (i)=11[01]|, andf 4 (i)=1[01]|1 so as to form an addition chain, 

calculates x f1 (') based on the product of x f2 < M ) and x f4 ( M ), x f2 (') based on 
the product of x f1 (') and x f3 ( M ), x f3 (') based on the product of x f2 (') and x f3 ( M ), and 
x f4 (') based on the product of x f1 (') and x f2 ('), and 

stores the calculation result in the calculation result storing unit. 

12. (Original) The apparatus according to Claim 10, 

wherein the calculation result storing unit includes four array regions F^), 
F 2 (), F 3 (), and F 4 () for storing calculation results and sets initial values F 1 (0)=x, 
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F 2 (0)=1 , F 3 (0)=x, and F 4 (0)=x, and 

the pre-calculation unit performs circular calculation so as to satisfy 
Fi(i)=F 2 (i-1)*F 4 (i-1), F 2 (i)=F 1 (i)*F 3 (i-1), F 3 (i)=F 2 (i)*F 3 (i-1), and F 4 (i)=F 1 (i)*F 2 (i) 
and stores the calculation result in the calculation result storing unit. 

1 3. (Original) The apparatus according to Claim 1 0, wherein the bit 
number W of each of the candidate exponents stored in the candidate exponents 
storing unit is changed in accordance with the bit number of the integer e. 

1 4. (Currently Amended) An oxponont ca l cu l at i on Ajnethod for encrypting 
or decrypting data by calculating x e based on two integers x and e, the method 
comprising: 

an input step of inputting the two integers x and e; 

a pre-calculation step of pre-calculating x A {l_i} for each of candidate 
exponents {l_i} (0<i<L-1 ) stored in a candidate exponents storing unit, the 
number of the candidate exponents being L, based on the input integer x, and 
storing the values x A {l_i} obtained by the pre-calculation in a pre-calculated 
values storing unit; 

a dividing step of dividing the input integer e into a plurality of values {f_i} 
(0<i<F-1 ) so that each of the values {f_i} corresponds to one of the candidate 
exponents {l_i}; 

a sequential processing step of sequentially updating a calculation result 
c, which is stored in a calculation result storing unit, for each of the divided 
values {f_i} (0<i<F-1) by using each of the pre-calculated values x A {l_i}; and 

an output step of outputting the updated calculation result c as x e after the 
calculation result c is updated for each of all the values {f_i} as x e . 
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1 5. (Currently Amended) An oxponont ca l cu l at i on ^ method for encrypting 
or decrypting data by calculating x e (mod N) based on three integers x, e, and N, 
the method comprising: 

an input step of inputting the three integers x, e, and N; 

a pre-calculation step of pre-calculating x A {l_i} for each of candidate 
exponents {l_i} (0<i<L-1 ) stored in a candidate exponents storing unit, the 
number of the candidate exponents being L, based on the input integer x, and 
storing the values x A {l_i} obtained by the pre-calculation in a pre-calculated 
values storing unit; 

a dividing step of dividing the input integer e into a plurality of values {f_i} 
(0<i<F-1 ) so that each of the values {f_i} corresponds to one of the candidate 
exponents {l_i}; 

a sequential processing step of sequentially updating a calculation result 
c, which is stored in a calculation result storing unit, for each of the divided 
values {f_i} (0<i<F-1) by using each of the pre-calculated values x A {l_i}; and 

an output step of outputting the updated calculation result c as x e (mod N) 
after the calculation result c is updated fo r oach of all the values {f_i} as x e (mod 
N). 

1 6. (Currently Amended) A computer-readable program stored in a 
computer-readable storage medium, for allowing a computer to execute 
exponent calculation for calculating x e based on two integers x and e, said 
program comprising codes for causing the computer to perform: 

an input step of inputting the two integers x and e; 

a pre-calculation step of pre-calculating x A {M} for each of candidate 
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exponents {l_i} (0<i<L-1) stored in a candidate exponents storing unit, the 
number of the candidate exponents being L, based on the input integer x, and 
storing the values x A {l_i} obtained by the pre-calculation in a pre-calculated 
values storing unit; 

a dividing step of dividing the input integer e into a plurality of values {f_i} 
(0<i<F-1 ) so that each of the values {f_i} corresponds to one of the candidate 
exponents {l_i}; 

a sequential processing step of sequentially updating a calculation result 
c, which is stored in a calculation result storing unit, for each of the divided 
values {f_i} (0<i<F-1) by using each of the pre-calculated values x A {l_i}; and 

an output step of outputting the updat e d calculation result c as x e after the 
calculation result c is updated for each of all the values {f_i} as x e . 

1 7. (Currently Amended) A computer-readable program stored in a 
computer-readable storage medium, for allowing a computer to execute 
exponent calculation for calculating x e (mod N) based on three integers x, e, and 
N, said program comprising codes for causing the computer to perform: 

an input step of inputting the three integers x, e, and N; 

a pre-calculation step of pre-calculating x A {l_i} for each of candidate 
exponents {l_i} (0<i<L-1 ) stored in a candidate exponents storing unit, the 
number of the candidate exponents being L, based on the input integer x, and 
storing the values x A {l_i} obtained by the pre-calculation in a pre-calculated 
values storing unit; 

a dividing step of dividing the input integer e into a plurality of values {f_i} 
(0<i<F-1 ) so that each of the values {f_i} corresponds to one of the candidate 
exponents {l_i}; 
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a sequential processing step of sequentially updating a calculation result 
c, which is stored in a calculation result storing unit, for each of the divided 
values {f_i} (0<i<F-1) by using each of the pre-calculated values x A {l_i}; and 

an output step of outputting the updated calculation result c as x e (mod N) 
after the calculation result c is updated for oach of all the values {f_i} as x e (mod 
N). 



